JavaScript is disabled. Some features of this site may not work properly. For a smoother experience, please enable JavaScript in your browser settings.

AbuseIPDB » 157.66.56.165

157.66.56.165 was found in our database!

This IP was reported 48 times. Confidence of Abuse is 100%: ?

100%

ISP	Argon Data Communication
Usage Type	Data Center/Web Hosting/Transit
ASN	AS58477
Domain Name	argonhost.com
Country	🇮🇩 Indonesia
City	Jakarta, Jakarta

IP info including ISP, Usage Type, and Location provided by IPInfo. Updated weekly.

Report 157.66.56.165

Whois 157.66.56.165

IP Abuse Reports for 157.66.56.165:

This IP address has been reported a total of 48 times from 31 distinct sources. 157.66.56.165 was first reported on April 26th 2025, and the most recent report was 30 minutes ago.

Recent Reports: We have received reports of abusive activity from this IP address within the last week. It is potentially still actively engaged in abusive activities.

Reporter	IoA Timestamp (UTC)	Comment	Categories
🇮🇩 soc-yk	2026-07-08 02:18:11 (30 minutes ago)	Type: suspicious_network_activity Risk: 85 Events: 20494 Evidence: - Persistent suspicious network ... show more Type: suspicious_network_activity Risk: 85 Events: 20494 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇺🇦 URAN Publishing Service	2026-07-08 01:52:17 (56 minutes ago)	157.66.56.165 - - [08/Jul/2026:04:52:16 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5 ... show more 157.66.56.165 - - [08/Jul/2026:04:52:16 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" ... show less	Web App Attack
🇺🇸 mnsf	2026-07-07 23:05:14 (3 hours ago)	Abuse Detected (9)	Brute-Force Web App Attack
🇮🇩 zam	2026-07-07 18:18:55 (8 hours ago)	157.66.56.165 - - [07/Jul/2026:18:18:53 +0000] "GET /wp-content.php HTTP/1.1" 301 289	Web App Attack
🇩🇪 Ba-Yu	2026-07-07 12:45:19 (14 hours ago)	WP-xmlrpc exploit	Web Spam Blog Spam Hacking Exploited Host Web App Attack
🇺🇦 URAN Publishing Service	2026-07-07 12:44:52 (14 hours ago)	157.66.56.165 - - [07/Jul/2026:15:43:11 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5 ... show more 157.66.56.165 - - [07/Jul/2026:15:43:11 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" 157.66.56.165 - - [07/Jul/2026:15:44:52 +0300] "GET /xmlrpc.php?rsd HTTP/1.1" 404 683 "-" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/88.0.4240.193 Safari/537.36" ... show less	Web App Attack
🇮🇩 soc-yk	2026-07-07 07:54:15 (18 hours ago)	Type: web_scanning Risk: 100 Events: 12967 Evidence: - Automated hostile web probing detected - Rep ... show more Type: web_scanning Risk: 100 Events: 12967 Evidence: - Automated hostile web probing detected - Repeated web scanning activity observed - Multi-event operational persistence identified show less	Web App Attack
🇺🇸 Rayulcifer	2026-07-07 06:08:31 (20 hours ago)	157.66.56.165 - - [07/Jul/2026:01:08:31 -0500] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 301 519 "www.goog ... show more 157.66.56.165 - - [07/Jul/2026:01:08:31 -0500] "GET /phpinfo.php?re@=vo@ HTTP/1.1" 301 519 "www.google.com" "Mozilla/5.0 (Linux; Android 7.0; SM-G892A Build/NRD90M; wv) AppleWebKit/537.36 (KHTML, like Gecko) Version/4.0 Chrome/60.0.3112.107 Mobile Safari/537.36" ... show less	Open Proxy Port Scan Hacking Web App Attack SSH
🇬🇧 Apache	2026-07-07 02:13:21 (1 day ago)	(mod_security) mod_security (id:210410) triggered by 157.66.56.165 (ID/Indonesia/-): 5 in the last 3 ... show more (mod_security) mod_security (id:210410) triggered by 157.66.56.165 (ID/Indonesia/-): 5 in the last 300 secs show less	Brute-Force Web App Attack
🇮🇩 soc-yk	2026-07-07 01:54:13 (1 day ago)	Type: suspicious_network_activity Risk: 100 Events: 13648 Evidence: - Persistent suspicious network ... show more Type: suspicious_network_activity Risk: 100 Events: 13648 Evidence: - Persistent suspicious network activity detected - Repeated hostile operational behavior observed - Multi-event operational persistence identified show less	Port Scan Hacking
🇧🇪 voormedia	2026-07-06 14:08:58 (1 day ago)	Accessed trap at '/phpinfo.php'	Web App Attack
🇮🇩 Burayot	2026-07-06 13:14:18 (1 day ago)	LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.66.56.165 (ID/Indonesia/-): 2 i ... show more LF_MODSEC: (mod_security) mod_security (id:1000001) triggered by 157.66.56.165 (ID/Indonesia/-): 2 in the last 3600 secs show less	Web App Attack
🇸🇪 KIDOS	2026-07-06 13:06:50 (1 day ago)	CrowdSec detected malicious activity	DDoS Attack
🇸🇪 KIDOS	2026-07-06 12:51:46 (1 day ago)	malicious activity	Web App Attack
Anonymous	2026-07-06 10:16:02 (1 day ago)		Bad Web Bot

Showing 1 to 15 of 48 reports

Think this IP has been falsely reported? You may request to have the associated reports reviewed and removed. Request Takedown 🚩

Recently Reported IPs:

🇺🇸 207.90.244.19

🇩🇪 185.242.3.195

🇸🇾 185.216.134.126

🇯🇵 153.121.54.102

🇨🇳 123.54.215.74

🇻🇳 116.110.10.32

🇿🇲 102.23.122.235

🇷🇴 92.118.39.77

🇫🇷 91.231.89.155

🇳🇴 87.120.104.75

🇸🇬 68.183.178.130

🇰🇷 61.75.111.162

🇺🇸 45.79.191.178

🇨🇦 20.63.87.152

🇻🇳 222.252.249.73

🇩🇪 194.187.176.250

🇩🇪 194.187.176.182

🇲🇽 189.203.163.10

🇮🇳 103.107.60.45

🇺🇸 64.52.161.203